AegisSIEM — Settings

Storage

Configure where AegisSIEM stores data and finds model files. Changes take effect on next service restart.

Ollama Models Directory Path to Ollama model manifests. Leave empty to use the default (~/.ollama/models/...).

Reports Output Directory Where daily summary reports are written.

Router & Perimeter Defense

ASUSWRT-Merlin router connection parameters for DNS sinkholing, iptables enforcement, and honeypot routing.

Router IP Address LAN IP address of the ASUS router (e.g. 192.168.50.1).

SSH Username Administrative user with SSH access on the router.

SSH Private Key Local path to the private key for router SSH authentication.

Router Identifier & Model Optional friendly name and hardware model (e.g. RT-AX3000).

Router Operations & Management

Live hardware telemetry, guest Wi-Fi provisioning, automated NVRAM & JFFS backups, and operational controls.

Hardware Platform

Loading...

Firmware: —

Uptime: —

CPU Load Average —

1 min

—

5 min

—

15 min

—

RAM Memory —%

Used: — MB / Total: — MB

JFFS Persistent Storage —%

Used: — MB / Total: — MB

Guest Wi-Fi Networks

Toggle isolated guest wireless SSIDs on or off across 2.4 GHz and 5 GHz bands.

Loading guest networks...

Configuration Backups & Disaster Recovery

Export NVRAM settings and JFFS custom configurations to standalone compressed archives.

Archive Filename	Contents	Size	Type	Created	Actions
Loading backups...

LLM Services

Connection settings for Ollama and AI-for-Survival inference backends.

Ollama URL Base URL for the Ollama API.

Ollama Start Command Shell command to launch Ollama if not running.

AI-for-Survival URL Base URL for the AFS pipeline API.

Analysis

Controls for the automated LLM log analysis loop.

Enable Analysis Loop Periodically analyze recent threats using the LLM.

Analysis Interval Minutes between automated analysis runs.

min

Dashboard

Listen Port Port for the web dashboard. Requires restart.

Appearance

Customize the visual presentation of the dashboard. Themes apply immediately and persist in your browser.

Theme Mode Choose between System (follows OS preference), Light, Dark, or OLED Pure Black.

Cloud AI Providers

Local models stay the default. Add a key only if you want to use a cloud provider. Keys are stored on this machine at ~/.config/ecosystem/provider_keys.json (owner-only) and are never shown again after saving.

Claude (Anthropic) Checking…

OpenAI Checking…

Gemini (Google) Checking…

Where Each Task Runs

Cloud usage is metered. Send only what is worth paying for to a cloud provider and keep high-volume work local — for example cloud for security analysis, local for chat. Choosing a cloud provider here enables it automatically. This setting is shared across the whole ecosystem, not just AegisSIEM.

Security analysis low volume, high value

Chat high volume — local avoids overages

Embeddings high volume — local recommended

Ecosystem Setup

The shared secret authenticates this device with the other ecosystem apps (registry, OpenEye, AI-for-Survival, MagicMirror). On the first/primary device, generate one. On additional devices, paste the same value so they can talk to each other securely.

Shared secret Checking…

Home Assistant Integration (MQTT Discovery)

Auto-publishes content filters, guest Wi-Fi, and real-time perimeter telemetry switches to Home Assistant via standard MQTT Discovery.

Checking… Checking MQTT broker connection…

Ready to generate switches for each rule in Content Filter.

Enable Home Assistant Integration Activate MQTT discovery and bidirectional switch control with Home Assistant.

Apple HomeKit Bridge (HAP Protocol)

Exposes content filters, guest Wi-Fi, and DNS shields as native Apple Home accessories for Siri voice control and Home app automations.

Checking…

🍎

Apple HomeKit Bridge

Local HAP daemon advertising via mDNS/Bonjour.

Enable Apple HomeKit Bridge Advertise on local LAN for pairing with Apple Home app (iPhone, iPad, Mac, Apple Watch).

Bridge Name Name of the bridge as displayed in Apple Home (e.g. "AegisSIEM Shield").

Bridge Port Local TCP port for the HAP bridge listener (default 51827).

Setup Code (PIN) 8-digit HomeKit pairing PIN in XXX-XX-XXX format (e.g. 031-45-154).

📱 Pair with Apple Home

Loading QR Code…

1. Open the Apple Home app on iOS, iPadOS, or macOS (on the same Wi-Fi LAN).
2. Tap + → Add Accessory.
3. Point your camera at the QR code on the left.
4. Or tap More options… and select AegisSIEM Shield.
5. Enter setup code: 031-45-154.

💡 Siri Voice Support: Once added, every content filter and the Guest Wi-Fi switch can be turned on or off via Siri (e.g. "Hey Siri, turn off Bedtime Filter" or "Hey Siri, turn off filter 1").

Amazon Alexa & Google Home Smart Home Integration

Standardized webhook skill and action adapters for Amazon Echo, Google Nest, and smart assistant cloud platforms.